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Abstract —We consider the problem of constructing (3, L) 
quasi-cyclic low-density parity-check (LDPC) codes from com¬ 
plete protographs. A complete protograph is a small bipartite 
graph with two disjoint vertex sets such that every vertex in 
the variable-node set is connected to every vertex in the check- 
node set by a unique edge. This paper analyzes the required 
lifting factor for achieving girths of six or eight in the resulting 
quasi-cyclic codes with constraints on lifting. The required lifting 
factors provide lower bounds on the block-length of such codes. 


I. Introduction and Background 

Protograph-based quasi-cyclic LDPC codes (protograph 
QC-LDPC) IT], are LDPC codes |^ with encoders and 
decoders amenable to implementation for practical purposes. 
Generally, a code consttucted from a protograph need not be 
quasi-cyclic. A QC code is built from a protograph by re¬ 
stricting the permutation matrices used in the lifting process to 
be circulants. A protograph QC-LDPC code can be described 
by specifying the permutation shift indices of the circulant 
permutation matrices associated with the lifting process @- 

A protograph 0 defines the family of codes that can be 
obtained from it by lifting and many properties of the codes 
in the family depend on the graphical structure of the chosen 
protograph. In this paper, we consider the case where the 
protograph is a simple (has no loops or multiple links between 
two vertices) and complete (every vertex in the variable-node 
set is connected to every vertex in the check-node set) bipartite 
graph. QC-LDPC codes obtained from simple and complete 
protographs are called conventional QC-LDPC codes in Q, 
which considers simple QC-LDPC codes in general, including 
the subset which are conventional. 

The performance of LDPC codes is dictated, to a certain 
extent, by the girth of the codes. Also, in the regime of 
short-to-moderate block-lengths, the minimum distance of an 
LDPC code affects its performance in the error-floor region 
if the variable-node degrees are small Q. In this regard, the 
minimum distance of a protograph QC-LDPC code and its 
girth are interrelated as suggested by the work in ||^. The 
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works in 0, 0 derive lower bounds on the required lifting 
factors (and thus block-lengths) for obtaining various girths 
for QC codes constructed from protographs and provide the 
foundations for this paper. Works including 0, 0, 0-0 
have focused on obtaining these bounds because they are of 
practical importance and have demonstrated code construction 
techniques to obtain codes with as high a girth as possible. 

We focus on the case of (3, L) protograph QC-LDPC codes. 
These are regular codes that perform well over many rates. The 
paper is organized as follows: Section |I^ introduces notation. 
Section [III] completely characterizes the lifting requirements to 
construct a (3,L) code with girth 6 when the lifting factor is 
equal to L and gives an explicit construction that achieves a 
girth of 6 for any possible value of L. Section IV derives 
a bound (under a constrained setting) on the lifting factor 
required to obtain a girth of at least 8. This bound improves 
on the bounds in 0> 0 - Section [V] concludes the paper. 


IT Definitions AND Notation 

A protograph 0 is a small bipartite Tanner graph m 
and a protomatrix is a biadjacency matrix of the protograph. 
A graph’s girth is the length of its shortest cycle(s). The 
protomatrices considered in this paper have the form 




protomatrix 


1 1 1 
1 1 1 
1 1 1 


3xL 


( 1 ) 


At places, the terms protograph and protomatrix are used 
interchangeably. Associated with any protomatrix, the process 
of lifting to obtain a QC code is the replacement of every 
non-zero entry z in the protomatrix by a sum of z circulant 
permutation matrices (CPMs) of size N x N with distinct 
support and every 0 in the protomatrix by an V x V matrix 
of all zeros. If the protomatrix is of size J x L then lifting 
yields a parity-check matrix H of size JN x LN. Because our 
protomatrices are simple and complete, lifting replaces every 
entry in the protomatrix with w N x N CPM. 

Definition 1 (Permutation-shift matrix 0/).' The 
permutation-shift matrix P of a QC-LDPC code constructed 
from a J X L protomatrix with entries at most equal to 1 
is the J X L matrix of permutation shift indices that are 
chosen for the non-zero entries of the protomatrix during 
the process of lifting. With the lifting factor being N, an 
element 0<a;<V—linP corresponds to a CPM in the 





parity-check matrix H obtained via x circular shifts of the 
rows of the identity matrix of size N x N. The orientation 
(left or right) of the permutation shifts is unspecified in this 
paper without loss of generality (WLOG). 

The cyclic group of integers modulo TV, {0,1,...,-/V—1}, is 
denoted Z/N. This is the set of first N non-negative integers 
with addition modulo-A^ as the associated binary operation, 
represented by Xi + Xj. Similarly, Xi — Xj = Xi + {—xj) 
represents adding the inverse of Xj to Xi. The order of a group 
is its cardinality. A permutation tt is a bijective map of a finite 
set of elements onto itself. 

Definition 2: A permutation tt of Z/N is said to have a 
fixed point if Tr{i) = i for any * = 0,1,..., — 1. 

Ill. On the Minimum Lifting Factor for Girth 
Greater Than or Equal To 6 

We consider the special case of this problem with the 
constraint that the lifting factor N satisfies N = L. This is 
the least value of N for which one can possibly obtain a girth 
of 5 > 4 0 , g. By looking at this special case we arrive 
at a combinatorial interpretation to the problem of obtaining 
codes with girth at least 6 from complete protomatrices of size 
J X L. Since N = L, we may use N and L interchangeably. 

Works including Q have constructed codes via computer 
searches to show empirically the existence of codes with 
girth g > 6 for some odd values of N = L (including 
analytical constructions for all primes; see E) also). We show 
analytically that for all odd values of N = L, there exist (3, L) 
codes with girth <? > 6 . |j9) has established this result and 
our contribution is a proof via combinatorial structures called 
complete mappings HI- We provide an algebraic construction 
that produces codes with girth g = 6 for any odd N = L. This 
construction includes, as a special case, the array-code based 
proof of 0 for the (3, L) case. 

Lemma 3 (l^): With the lifting factor being N, in any 
QC-LDPC code with a protomatrix with no entry larger 
than 1, a cycle of length i (I even) in the Tanner graph 
of the code can be equivalently described by a sequence of 
edges (ei, 62 ,..., efi) in the protograph whose corresponding 
permutation shifts in P that are given as Xi, 0 : 2 ,..., satisfy 


may be written WLOG as 


P = 


0 

0 

7r(0) = 0 


0 

1 

7r(l) 


0 

2 


tt{2) 


TT 


0 

N - 1 
(iV-1) 


( 3 ) 


where tt has only one fixed point at 7r(0) = 0. 

Proof: Irrespective of the 3L indices that are chosen for 
P, one can always apply circular shifts to the row blocks and 
the column blocks of H (after lifting) to obtain an isomorphic 
graph for which the first row and column have all-zero indices 
in P, as observed in Q. For girth p > 4, Q shows that no 
non-zero element can repeat in the same row or the same 
column. Thus the non-zero entries in each of rows 2 and 3 are 
all unique within the respective rows and the ordering of row 
2 in g can be obtained WLOG by rearranging the columns 
once we have O’s in row 1 and column 1. To ensure that no 
column repeats a nonzero value, the permutation cannot have 
any fixed point except 7r(0) = 0. ■ 

The preceding lemma implies that, WLOG, only L—1 non¬ 
zero permutation shifts need to be specified and these belong 
to the third row. As an example where repetition in the same 
column prevents g > 4, the case of L = 2 leads to p = 4 as 
there is only one non-zero element in Z/2. The probability that 
a permutation of a finite number of elements {N — 1) has no 
fixed points asymptotically, as N ^ 00 , equals ^ jT^ . If we 
search randomly for permutations of A^ — 1 non-zero elements 
to achieve a girth of p > 4, then the number of permutations 
to be considered when constructing a code for large values of 
AT — 1 is very high but only approximately 36.8% of them will 
pass the preliminary test of not having a fixed point. 

Definition 5 (Complete mapping A complete 

mapping of the cyclic group {Z/N,+) is a permutation tt 
which satisfies 7r(0) = 0 and that (0,7r(l) — l,7r(2) — 
2,..., tt{N — 1) — (AT — 1)) is also a valid permutation. 

Theorem 6: With a lifting factor of N = L, the parity- 
check matrix H of a code with a complete protomatrix of 
size 3 X L has a girth p > 4 if and only if the permutation tt 
of Z/AT that specifies the third row of P in 0 is a complete 
mapping. 

Proof: Consider any two columns of the shift matrix 
of g and form a 2 x 2 sub-matrix of rows 2 and 3 out of the 
chosen columns as 


i 

^(—l)*'''^Xi = 0 mod AT, (2) 

i=l 

where ^ e^+i for all z S {1, 2, ...,£— 1} and e\ f- ei. 
Consecutive pairs of consecutive edges {ei,ei+i} for all i G 
{1, 2, 1} and {ee, Ci} alternatingly lie in the same row 

or same column of the protomatrix. 

The elements of P are assumed to be in Z/N and thus 
“mod AT” may not be mentioned at most places that involve 
operations with elements from P. 

Lemma 4 (Extension o/S Theorem 2.2): With a lifting 
factor of N = L, any permutation-shift matrix P that could 
lead to g > A for a (3, L) code with a complete protomatrix 


^ ,Xk = TT{Xi),Xe = TT{Xj). 

_Xk Xl_ ^ 

From the general condition of g in Lemma ^ Xi,Xj,Xk,Xi 
lead to cycle(s) of length four if and only if (iff) 

Xi - Xk + X{, - Xj = 0. (4) 

Rewriting the above, the girth is greater than 4 iff 

(xi - Xj) - (xfc - Xi) ^0, (5) 

which means that xe — Xj Xk — Xi should be satisfied for 
any Xi,Xj,Xk,xe as considered above. This is possible iff 

(7r(row 2) — row 2) (6) 






describes a permutation (i.e. the sequence contains each dis¬ 
tinct element in the group exactly once), which occurs iff row 
3 is a complete mapping. ■ 

Theorem 7: There exists a (3, L) quasi-cyclic LDPC code 
with a complete protograph lifted by a factor N = L satisfying 
girth p > 4 iff L is odd. 

Proof: From 112|, there exists a complete mapping of a 
finite abelian group of order N iff the group does not possess 
exactly one element of order 2. When N is even, this condition 
is violated as one can verify that is the only order-2 element 
in the finite abelian group Z/7V. On the contrary, in finite 
groups Ij/N of odd orders there exists no element of order 2, 
according to Lagrange’s theorem on the order of elements in 
a finite group. This argument in conjunction with Theorem]^ 
completes this proof. ■ 

The number of complete mappings of Z/iV is documented 
in n^. The first few terms of this sequence as a function 
of N, from N = 1,3,5,..., are 1, 1, 3, 19, 225, 3441, 
79259, 2424195, 94471089, 4613520889. For odd = L 
all the complete mappings that yield codes with girth g > 6 
lead to p = 6 since girth g > 8 requires a higher lifting 
factor (see Section m- For odd N = L, random search 
might identify a complete mapping and hence a g = 6 code, 
but the probability of any randomly selected mapping being 
complete decreases quickly with increasing L. For instance, 
when L = 15 corresponding to a design rate R = = 0.8 

this probability is = 0.000028 and when L = 17 and 

R = 0.8235 this probability is 0.000004 and so on. In the 
following we present a family of complete mappings and thus 
a family of codes for any odd N = L, L > 3 that have g = 6. 

Corollary 8 (Product construction): Consider the follow¬ 
ing mapping for row 3 in ([^ with h G {2, 3,..., — 1}: 

TTp{i) = hi mod A^, 0 < i < A^ — 1, (7) 


where hi mod N is multiplication modulo-W of integers h 
and i. For N = L odd and N > 3, if h and h — 1 are each 
coprime with N, then tt^ is a complete mapping of Z/N and 
thus leads to a (3, L) code with girth 6. 

Proof: Note that since h is chosen to be coprime with 
respect to N, (hi mod A^:0<i<A^ — l)isa valid 
permutation of Z/N. This is because hi — hj = h(i — j) f 0 
mod N, Vi f j as h is not a factor of N. We need to further 
show that 0 from Theorem has no solution. Writing Q, 
which is obtained from Q, for this permutation: 

(xe - Xj) - (xk - Xi) f 0 

h(xj — Xi) — (xj — Xi) f 0, as Xk = hxi, X(, = hxj 
(h - l){xj - Xi) f 0, 


which is satisfied for this permutation for all Xj f Xi since 
A — 1 > 1 is chosen to be coprime with respect to N. ■ 

There exists such an h for every odd N > 3. An example 
is A = A^ — 1 for which 


P = 


0 

0 

0 


0 

1 

N-1 


0 

2 

N -2 


0 0 

N -2 N-1 
2 1 


( 8 ) 


Also, (3, L) array codes i), fTT|, for any odd L > 3 
(not necessarily prime), are a special case of the preceding 
construction with A = 2 and thus have g = 6 0. 

Corollary 9: If A^ = L is even then there exists a (3, L) 
complete-protomatrix-based code with girth equal to 4 whose 
Tanner graph has exactly N cycles of length four. 

Proof: This follows from p^ , which proves that in case 
the order of a finite abelian group is even then there exists 
an “almost complete” mapping tt of the group such that the 
sequence (0,7r(l) — 1,7r(2) — 2,..., tt(N — 1) — (N — 1)) has 
exactly A^ — 1 distinct elements. Thus, one element appears 
twice. This implies that there exists a mapping for the third 
row such that only one 2x2 block from the second and the 
third rows leads to N length-4 cycles. ■ 

As shown in 1^, it can also be observed that if L is even 
then there exists a (3, L) complete-protomatrix-based code 
with a girth of 6 if the lifting factor is N = L + 1- 

One can generalize the discussion so far to see that for 
the (J,L) case there could be a code with p > 4 when the 
lifting factor is N = L only if there exist J — 2 distinct 
complete mappings of Z/N. This condition is necessary but 
not sufficient because the rows produced by the J—2 complete 
mappings also have to satisfy the following condition: Every 
pair of the ('^ 2 ^) rows indexed by {{i,j} '■ 3 < i < j < J} 
are such that row j is a complete mapping of row i. 

Consider the computer-search based Table of Q (repro¬ 
duced below). When N = L = 9, the computer search could 
not find a (J, 9) code with girth g = 6 when J > 4. Using 
the previous paragraph, we can confirm that such a code 
does not exist. There are 225 complete mappings of Z/9. We 
can corroborate the result in this table since not even one 
pair out of (^ 2 ^) pairs of complete mappings can satisfy the 
requirement that one row in the pair is a complete mapping 
of the other. 


TABLE I 

Smallest Value of N for which a (J, L) Code with Girth g > 6 
WAS Found in Using Computer Search 


L 

J 

4 

5 

6 

7 

8 

9 

10 

11 

12 

3 

5 

5 

7 

7 

9 

9 

11 

11 

13 

4 

- 

5 

7 

7 

9 

10 

11 

11 

13 

5 

- 

- 

7 

7 

9 

10 

11 

11 

13 


IV. Towards a Tighter Bound on the Required 
Lifting Factor for Girth > 8 while L > 4 
Assuming L > 4, it is known that the lifting factor N 
has to satisfy N > 2(L — 1) to obtain a girth of p > 8 for 
our (3, L) codes 0. In this section, we derive an improved 
bound on this required lifting factor under a constraint by 
using an additive combinatorics formulation of the problem. 
It is conjectured, for future investigation, that the bound holds 
without this imposed constraint. 

The following lemma states the necessary and sufficient 
conditions of Q for the permutation-shift matrix P of a 
complete-protomatrix-based (3, L) code to achieve g > 8. 
























Lemma 10: For L > 4, let L' = L — 1 and the lifting factor 
be N. The permutation-shift matrix 


P = 


0 

0 

0 


0 

Xi 

XL' + l 


0 

X2 

XL'+2 


0 

XL' 

X2L' 


(9) 


leads to a girth of p > 8 iff all the following conditions hold: 
With^,je{l,2,...,2L'}, 

1) Xi ^ Xj for all i 7 ^ j and a;^ 7 ^ 0 for all i. 

Fixing i > L' + 1 and j = i — L' (so that Xi and Xj are in 
the same column of P, with xi in the third row): 


2) Xi - Xj 7 ^ -Xk, where A: G {1, 2,..., L'} \ {j}, 

3) Xi — Xj 7 ^ Xk, where k G {L' + 1, L' + 2,..., 2L'} \ {z}, 

4) Xi — Xj ^ Xk — Xi, where k G {L' +1, L' -f 2,..., 2L'} \ 
{z},fG{l,2,...,L'}\{j},fc7^^ + L', 

5) Xi — Xj ^ Xk — Xi, where k G {L' + 1,L' + 2,..., 2L'} \ 
{z}, k = i + L'. 


Proof: Condition 1 is Theorem 2.4 of Q, which yields 
the necessary condition N > 2{L — 1) = 2L' for achieving 
g > 8. Conditions 2 and 3 apply (|^ to the first column and 
any other two columns of the shift matrix in (|^. Condition 
4 similarly considers any three columns apart from the first 
(all-zeros) column. Condition 5 avoids length-4 cycles from 
rows 2 and 3 of P. ■ 

Definition 11 (Girth-8 table): A girth-8 table (Gg table) of 
a (3, L) complete-protomatrix-based QC-LDPC code whose 


permutation-shift matrix is P, using the notation of Lemma 10 
is a table of L' x L' differences: 


+\- 

Xl 

X2 


Xl' 

Xl'+i 

Xl'+2 

di = x^i+i — Xl 
Xl'+ 2 - Xl 

Xl' + 1 - X2 

d2 


Xl'+i — Xl' 
Xl'+2 - Xl' 

X2L' 

X2L' - Xl 

X2L' - X2 


dh' 


\Ai f] Aj\ = 0 or n AjI = L' — 1 then such a valid 
Gg table corresponds to a lifting factor of iV > 3L' — 1. 

Proof: In general, n A^ | < L' — 1, z 7 ^ j since every 
row has a diagonal element that is distinct from the elements 
in the rest of the table. The proof, which is given in the rest 


of this section, applies conditions 1, 4 and 5 from Lemma 10 


The case where 3 z 7 ^ j : \Ai n Aj| = 0 is considered first. 
If so, then \Ai\ -f \Aj \ = 2L' and the rest of the L' — 2 rows 
contribute at least one distinct element each as their diagonal 
elements have to be distinct and thus the number of distinct 
non-zero elements is at least 3L' — 2 and N > 3L' — 1. 

For the second case, assume WLOG that the rows i,j are 
the first two rows of the Gg table, corresponding to Ai and A 2 , 
or the table can be rearranged accordingly (this corresponds to 
permuting the columns of P). Denote the L' distinct elements 
of Ai (in order from left to right) as 


di = XL'-i-l — Xi, fi,f2, • • . , fh'-l- 

Any Ai,i 7 ^ l can be derived from Ai through an offset. 
For example, A 2 can be obtained from Ai by adding A = 
XL '+2 - XL'+l to di,fi,f 2 , ■■■, fu-i in that order. 

The supposition |Ai n A 2 I = L' — 1 implies that Ai, A 2 
differ in only di 7 ^ ^ 2 . Since di does not repeat or “lead to” 
a new element (or else |Ai n A 2 I < L' — 1), while adding 
A 7 ^ 0 to it and since the only new element that is formed in 
this second row is 0(2 = /i + A, this means that di -f A = 
for some z G {1, 2,..., L' — 1}. Also VA: G {2,3,..., L' — 1} 
there exists a unique Ik G 1}\{A;} such that 

fk + A = fi^, fk A di, fk -f A d2- 

Definition 14 (Circular representation): We choose to rep¬ 
resent the elements of Z/N as unique points on a circle in 
order from 0 through A — 1 in the anticlockwise direction 
such that N — 1 appears on the circle before crossing 0 when 
counting from 0 (as integers). With this representation, addi¬ 
tion corresponds to moving along the anticlockwise direction. 


A valid Gg table is one which leads to a girth of g > 8. 

Lemma 12: A Gg table is valid iff 

1) The set of row and column headers together has 2L' 
distinct non-zero elements, 

2) The diagonal elements di,d 2 , ■ ■ ■ ,dL' are all different 
from the inverses of the column headers, 

3) The diagonal elements are all different from the row 
headers, 

4) None of the diagonal elements is equal to any of the off- 
diagonal elements of the table, 

5) The diagonal elements are all distinct. 

Proof: These conditions are the equivalent conditions of 
Lemma[T^in the same order. Note that a valid Gg table has no 
0 anywhere in it. Conditions 4 and 5, which are mathematically 
the same albeit for the choice of elements involved but stated 
separately for clarity, according to Lemma [T 0 | justify uniquely 
identifying the diagonal elements as di,d 2 , ■ ■ ■, dL'■ ■ 

Theorem 13: Let the L' rows of any valid Gg table 
be considered as sets of L' elements each and denoted 
Ai, A 2 ,..., A^/. If there exist two rows i j such that 




Fig. 1. One possible arrangement of elements of row 1 for Theorem |13| 


A. Case 1 

Fig. [3 shows one of the two possible cases for the structure 
of the elements in Ai U {^ 2 } with respect to the circular 
representation. In this case, the L' -\-l elements di,..., fi,d 2 
form a single chain from di to d 2 , through L' intervals of 
















A = Xi '_|_2 — Xl'+i points each, as shown in Fig. WLOG 
the chain begins at di and progresses anticlockwise or else the 
two rows can be exchanged to yield this. Fig. l|[b)| considers 
any possible wrap around. 

Lemma 15: For a valid Gg table that falls in the case 
illustrated by Fig.[^ there exists a third row whose L' elements 
are all different from the L' + 1 elements in the chain 

where = 

{2,3,...,L'-1}. 

Proof: Any row beyond the first two rows of the G% table 
relates to Ai by an offset A' f A. If di or d 2 repeat in such a 
row then the Gg table is not valid. With { 11 , 12 ,..., Il’-i} — 
{1, 2,..., L' — 1} and with iL'-i = 1, we need to show that 
for a valid Gg table that falls in Case 1, for any k i G 
{1,2,... ,L' - 1},/,, +A'f fi^ and di + A' ^ fi,. 

Assume for a contradiction that 3 k + A' = fi^. 

Define nA = A + A + • • • + A, where n is any non-negative 


integer. If n is negative, define nA = —A — A — ■■■ — A. 


— n times 

\f £ > k, then /j^ = fi^, +{£ — k) A and hence A' = (f — 
fc)A. Since l<f — — Iwe can also obtain that 

^2 = 5 - {£ — k)A. This shows that ^2 would be an 

element of the new row, yielding a contradiction. The same 
argument in the opposite direction will show that di will repeat 
as di = + A' if £ < k. Similarly, one can show that, if 

di + A' = fig. then d 2 will repeat. ■ 

To summarize, there exist at least {L' + 1) + L' + {L' — 3) = 
ZL' — 2 distinct non-zero elements in a Gg table that is valid 
and falls in Case 1, which means N > ZL' — 1: L' + l elements 
from AiU{d 2 }, L' elements in a third row and the term L' — Z 
appears from counting at least one distinct non-zero entry (on 
the diagonal) from each of the remaining rows. 


B. Case 2 

The situation where a single chain is not present within the 
set Ai U{d 2 } is considered now. This is because, introducing 
only one new element when creating the second row from the 
first row, i.e. d 2 , can also arise from the situation shown by 
the example in Fig. (refer to the following description). 



— Elements of S 

— Elements of 5", 
= Elements of S \ 

L' = \Q 
k = A 
£ = 2 


Fig. 2. Alternative arrangement of elements of row 1 for Theorem |13| 

The elements of Ai U {d 2 } could be in £ -f 1 disjoint sets: 
1) Set S'with elements {di,,/i, d 2 }. 


2) £ other sets denoted S',l<j<£ each comprising k 
elements such that within each set adding nA, n G Z to 
any element yields another element within the set itself 
While this case is introduced here, the proof that the 
theorem holds for it is given in the Appendix. This concludes 
the proof of Theorem [TI] ■ 

Although Theorem |13| only applies under specific con¬ 
straints on the girth-8 table, we conjecture that the bound 
N > ZL' — 1 applies without these imposed constraints that 
3 i j G {1,2, ...,L'} such that |Ai n A^j equals 0 or 
L' -1. 


V. Conclusion 

This paper considers the problem of constructing (3, L) 
quasi-cyclic low-density parity-check (LDPC) codes from 
complete protographs. An application of complete mappings 
from finite group theory provides explicit constructions of 
(3, L) QC-LDPC codes that achieve girth g = 6 with the 
minimum possible lifting factor of L when L is odd. Iden¬ 
tifying the minimum lifting factor required to obtain a girth 
of 5 > 8 is posed as a problem in additive combinatorics 
using the construct of a girth-8 table (Gs table). An improved 
bound on the lifting factor is obtained under certain constraints 
on the cardinality of girth-8-table row-set intersections. We 
conjecture that this improved bound applies in general. 
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Appendix 
Proof of Case 2 


We prove here that Theorem 13 holds for Case 2 which 
was introduced in Section |IV-B The I sets being referred to 
in Case 2 (from Fig. have the same number of elements, 
denoted k here, or else adding A will create a new element for 
the second row, apart from d 2 which is already being created 
from fi G S. To show that the theorem holds for this case, 
we focus on the ki elements from the £ sets. For this case, 
a “linear” relationship within the elements of the £ + 1 sets 
holds as follows. For the elements in S, 


di + ^ —fii, 
fil + ^ =/i2) 


fiL'-2-kt + ^ -/l’ 

/i + A =d2- 

For the elements in the £ sets 5', 

Va: G Sp I < j < i,x + nA G S'p\ln G Z. (10) 

Observe that if the elements from the group Z/A are chosen 
for Ax according to Case 2, then the following holds: 

Vx G Z/A, a; + A:A = X. (11) 

Each column of the Gg table has a diagonal element that 
appears only once in the table. By adding offsets to the kt 
elements in (Ai U {^ 2 }) \ .S' to obtain the k£ corresponding 
diagonal elements (and their respective rows), we have the 
following crucial observation. 

Lemma 16: For each column corresponding to an element 
in {Ai U {(i 2 })\<S', when obtaining a new diagonal element, at 
least k new non-zero elements are obtained in the correspond¬ 
ing row. Considering all k£ such rows, a total of k'^£ distinct 
elements, that are different from the elements in Ai U {^ 2 }, 
is guaranteed for any valid Gg table that falls under Case 2. 

Proof: Consider xi G {Ai U {(( 2 }) \ S and assume that 
xi G Sp for some 1 < < ^. There is an offset Ai 7 ^ A 

such that xi -I- Ai = d^^^, where is the diagonal element 
in the column containing xi. Note that the row containing d^^ 
also contains every element in -I- Ai = {s-l-Ai : s G 5''^}. 
No element in + Ai appears in Ai U {(( 2 } as this would 
force either S'^ -f Ai = 5', j 7 ^ zi so that dx^ G AiU { 1 ( 2 } or 
S C Sp + Ai so that di and d 2 appear in the row containing 
dxi due to Either of these results would lead to a Gg 
table that is not valid. 

Now consider a second element X 2 G {Ai U {d 2 })\<S', X 2 7 ^ 
xi and X 2 G S'^, where 1 < 12 < f is not necessarily different 
from ii. There is an offset A 2 ^ {A,Ai} such that X 2 + 
A 2 = dx 2 , where dx^ is the diagonal element in the column 
containing X 2 - Note that the row containing dx^ also contains 
every element in + A 2 . Eollowing the same reasoning as 
with Xi, no element in S'^ -f A 2 appears in Ai U {^ 2 }- Also, 
+ Ai) n + A 2 ) = 0 or else + Ai = + A 2 


due to ( [T0| and in particular dx^ G + Ai which would 
lead to a Gg table that is not valid. 

Continuing by induction yields distinct elements that 
are not in the first row and are different from d 2 . ■ 

Thus we have for any valid Gg table in Case 2 that 

N > L' + 2 + k^£, (12) 

where L'-|-2 arises from counting the elements in AiU{d 2 , 0}. 

Lemma 17: In the context of Case 2, where IS"! = L' — 
k£ -\-1 , 


L' — k£ + 1 < k. 


(13) 


Proof: Due to •dD- ■ 

Case 2 is only possible when L' > 5, fc > 3 and £>\. We 
consider two ranges for k as follows: If fc > -^2^ — 3, then 


N>L' + 2 + k^£ 

>L' + 2 + 

>L' -f 2 -f 2L' - 3 = 3L' - 1. 


If A: < y/2l7 


3, we first use (131 in (12 1 to get 


N>L' + 2 + k^£ 

>L' + 2 + k{L' -k + l) 
=L' + 2 + kL' -k^ + k, 


(14) 


(15) 


which yields a quadratic expression in k for every L'. This 
is concave in k and it can be verified that the maximum of 
the right-hand side is obtained at ^ 2 ^ ■ Under the 

supposition that k < y/2L' - 3, we can also trivially verify 
that k < x/2L' — 3 < fcmax for L' > 5 and thus (by concavity) 
to minimize the right-hand side, we have to set k to the 
smallest feasible value, which is k = 3. This yields 

A >L' -f 2 -f 3L' - 9 -f 3 

=4L'-4 > 3L'- 1,VL'> 5, (16) 


which completes the proof for Case 2 and thus 


of Theorem 13 

















